bugfix: avoid XSS in customer event box (LMS #1910)

chilek · Jan 17, 2021 · b4063a2 · b4063a2
1 parent 01a8b77
commit b4063a2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/default/customer/customerevents.html b/templates/default/customer/customerevents.html
@@ -94,7 +94,7 @@
 						</div>
 						<div class="lms-ui-tab-table-wrapper title-description col-2">
 							<div class="lms-ui-tab-table-column title">
-								{$event.title}
+								{$event.title|escape}
 							</div>
 							<div class="lms-ui-tab-table-column description">
 								{$event.description|default:"-"}